RHSA-2005-069: perl-DBI

NASLDB: RHSA-2005-069: perl-DBI

General

ID: 16298
Name: RHSA-2005-069: perl-DBI

Summary: Check for the version of the perl-DBI packages

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: CVSS2#AV:L/AC:L/Au:N/C:N/I:P/A:N
CVSS Base Vector: –
CVSS Temporal Vector: –

Port: 0
Family: Red Hat Local Security Checks
Type: Local

Description

An updated perl-DBI package that fixes a temporary file flaw in
DBI::ProxyServer is now available.

DBI is a database access Application Programming Interface (API) for
the Perl programming language.

The Debian Security Audit Project discovered that the DBI library creates a
temporary PID file in an insecure manner. A local user could overwrite or
create files as a different user who happens to run an application which
uses DBI::ProxyServer. The Common Vulnerabilities and Exposures project
(cve.mitre.org) has assigned the name CAN-2005-0077 to this issue.

Users should update to this erratum package which disables the temporary
PID file unless configured.